CVE-2026-34705
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information.
Risk Assessment
Disclosure of sensitive information could lead to serious consequences for the organization, including data privacy breaches. Exploitation of this issue requires user interaction, increasing the risk when opening malicious files.
Recommendation
It is recommended to update to the latest version of InDesign to mitigate the risk associated with this vulnerability. Users should exercise caution when opening files from unknown sources.
Original NVD description (English source)
InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.